[108776] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

RE: New service - the Team Cymru Malware Hash Registry!

daemon@ATHENA.MIT.EDU (Frank Bulk)
Tue Oct 28 18:43:27 2008

From: "Frank Bulk" <frnkblk@iname.com>
To: "'Rob Thomas'" <robt@cymru.com>
In-Reply-To: <49074604.9090006@cymru.com>
Date: Tue, 28 Oct 2008 17:42:49 -0500
Cc: ian@cymru.com, nanog@nanog.org
Reply-To: frnkblk@iname.com
Errors-To: nanog-bounces@nanog.org

Yes, for antivirus checking.  I can't direct you on how development on those
plugins could be focused, but I'm sure there are listservs/people who could
help you with that.

I don't have any special inroads, but I'll send you the contact info for
Virustotal offline.

Frank

-----Original Message-----
From: Rob Thomas [mailto:robt@cymru.com] 
Sent: Tuesday, October 28, 2008 12:04 PM
To: Frank Bulk
Cc: ian@cymru.com; nanog@nanog.org
Subject: Re: New service - the Team Cymru Malware Hash Registry!

Hi, Frank.

> Interesting idea -- two questions:

Thanks!

> a) Will Cymru be developing any plugins for sendmail and the like that
> facilitate Cymru's MHR to be queried?

We've not done so, but it's an interesting idea.  Would it make more
sense to focus on a plugin for sundry anti-spam and anti-virus products
instead?

We have a few more services to release first, though, so stay tuned.  :)

> b) Is Cymru cooperating with VirusTotal on this project?  They compute
> hashes, too, and it could be a data feed for Cymru's content

We work with with lots of folks, and are happy to work with even more.
Introductions or suggestions are always welcome!  Got a name or email
address handy?

Thanks,
Rob.
--
Rob Thomas
Team Cymru
http://www.team-cymru.org/
cmn_err(CEO_PANIC, "Out of coffee!");





home help back first fref pref prev next nref lref last post